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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings of claims in the 
application: 

LISTING OF CLAIMS 

1. (Original) A method for remote incremental program verification, said method comprising: 
receiving content verified by at least one content provider, said at least one content provider 

including an applet provider, a device manufacturer, a device issuer and a trusted post- 
issuance installer, said content including at least one program unit, each program unit 
comprising an Application Programming Interface (API) definition file and an 
implementation, each API definition file defining items in its associated program unit 
that are made accessible to one or more other program units, each implementation 
including executable code corresponding to said API definition file, said executable 
code including type specific instructions and data, said verification including 
determining binary compatibility of earlier program unit implementations with later 
program unit implementations; 

installing said content on a resource-constrained device; 

issuing said resource-constrained device to an end user; and 

allowing post-issuance installation of verified content on said resource-constrained device 
by said trusted post-issuance installer, said post-installation occurring after said 
issuance. 

2. (Previously Presented) A method for remote incremental program verification, said method 
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comprising: 

receiving content verified by at least one content provider, said at least one content 
provider including an applet provider, a device manufacturer, a device issuer and a 
trusted post-issuance installer, said content including at least one program unit, 
each program unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition file defining items in its 
associated program unit that are made accessible to one or more other program 
units, each implementation including executable code corresponding to said API 
definition file, said executable code including type specific instructions and data, 
said verification including determining binary compatibility of earlier program unit 
implementations with later program unit implementations, said verification further 
comprising: 

receiving a second version of said first program unit implementation and a 
second version of said first program unit API definition file, said second 
version being a revised version of said first version; 

verifying said second version of said first program unit implementation, 
including 

indicating a verification error when said second version of said first program 
unit implementation is not internally consistent; and 

indicating a verification error when said second version of said first program 
unit implementation is inconsistent with said second version of said first 
program unit API definition file; and 

verifying said second version of said first program unit implementation is 
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binary compatible with said first version of said first program unit 
implementation, including indicating a verification error when said first 
version of said first program unit API definition file is incompatible with 
said second version of said first program unit API definition file; 
installing said content on a resource-constrained device; 
issuing said resource-constrained device to an end user; and 
allowing post-issuance installation of verified content on said resource-constrained 
device by said trusted post-issuance installer, said post-installation occurring after 
said issuance. 

3. (Original) The method of claim 2, further comprising: 

indicating a verification error when a second program unit implementation that references 
said first program unit is inconsistent with said first version of said first program unit 
API definition file; and 

indicating said second program unit implementation is verified with said second version of 
said first program unit API definition file when said second version of said first 
program unit implementation is compatible with said first version of said first program 
unit implementation. 

4. (Original) The method of claim 3, further comprising: 

indicating said second program unit implementation is verified with said second version of 
said first program unit implementation when said second program unit implementation 
is verified with said second version of said first program unit API definition file. 
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5. (Original) The method of claim 2 wherein said first version of said first program unit API 
definition file is binary compatible with said second version of said first program unit API 
definition file when said second version of said first program unit API definition file 
includes a superset of each element in said first version of said first program unit API 
definition file. 

6. (Original) The method of claim 2 wherein 

said trusted post-issuance installer verifies a new program unit; and 
said trusted post-issuance installer installs said verified new program unit on said resource- 
constrained device. 

7. (Original) The method of claim 6 wherein post-issuance verification is performed on a 
resource-rich device. 

8. (Original) The method of claim 6 wherein post-issuance verification is performed on a 
terminal device. 

9. (Original) The method of claim 6 wherein said verification is performed by the provider of 
said new program unit. 

10. (Original) The method of claim 6 wherein said verification is performed by said applet 
provider. 
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1 1 . (Original) The method of claim 6 wherein said verification is performed by.said device 
manufacturer. 

12. (Original) The method of claim 6 wherein said verification is performed by said device 
issuer. 

13. (Original) The method of claim 6 wherein said verification is performed by said applet 
provider and said device manufacturer. 

14. (Original) The method of claim 6 wherein said verification is performed by said applet 
provider and said device issuer. 

15. (Original) The method of claim 6 wherein said verification is performed by said device 
manufacturer and said device issuer. 

16. (Original) The method of claim 6 wherein said verification is performed by said applet 
provider, said device manufacturer and said device issuer. 

17. (Original) The method of claim 6 wherein said verification is performed by said applet 
provider, said device manufacturer, said device issuer and said trusted post-issuance 
installer. 



7 of 40 



SV #168346 vl 



Docket No.: SUN-P4182 
(811173-000118) 

18. (Original) The method of claim 6 wherein said verification is performed by said device 
manufacturer, said device issuer and said trusted post-issuance installer. 

19. (Original) The method of claim 6 wherein said verification is performed by said device 
manufacturer and said trusted post-issuance installer. 

20. (Original) The method of claim 6 wherein said verification is performed by said device 
issuer and said trusted post-issuance installer. 

21. (Original) The method of claim 6 wherein post-issuance verification is performed on a 
resource-rich device. 

22. (Original) The method of claim 6 wherein post-issuance verification is performed on a 
terminal device. 

23. (Original) A method for remote incremental program verification, said method comprising: 
receiving content verified by at least one content provider, said at least one content provider 

including an applet provider, a device manufacturer, a device issuer and an untrusted 
post-issuance installer, said content including at least one program unit, each program 
unit comprising an Application Programming Interface (API) definition file and an 
implementation, each API definition file defining items in its associated program unit 
that are made accessible to one or more other program units, 'each implementation 
including executable code corresponding to said API definition file, said executable 
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code including type specific instructions and data, said verification including 
determining binary compatibility of earlier program unit implementations with later 
program unit implementations; 

installing said content on a resource-constrained device; 

issuing said resource-constrained device to an end user; and 

allowing post-issuance installation of verified content on said resource-constrained device 
by said untrusted post-issuance installer, said post-installation occurring after said 
issuance. 

(Previously Presented) A method for remote incremental program verification, said method 
comprising: 

receiving content verified by at least one content provider, said at least one content 

provider including an applet provider, a device manufacturer, a device issuer and an 
untrusted post-issuance installer, said content including at least one program unit, 
each program unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition file defining items in its 
associated program unit that are made accessible to one or more other program 
units, each implementation including executable code corresponding to said API 
definition file, said executable code including type specific instructions and data, 
said verification including determining binary compatibility of earlier program unit 
implementations with later program unit implementations, said verification further 
comprising: 

receiving a second version of said first program unit implementation and a 
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second version of said first program unit API definition file, said second 
version being a revised version of said first version; and 
verifying said second version of said first program unit implementation, 
including 

determining whether said second version of said first program unit 

implementation is internally consistent; and 
determining whether said second version of said first program unit 

implementation is consistent with said second version of said first 

program unit API definition file; and 
verifying said second version of said first program unit implementation is 

binary compatible with said first version of said first program unit 

implementation by comparing said first version of said first program unit 

API definition file and said second version of said first program unit API 

definition file; 
installing said content on a resource-constrained device; 
issuing said resource-constrained device to an end user; and 

allowing post-issuance installation of verified content on said resource-constrained device 
by said untrusted post-issuance installer, said post-installation occurring after said 
issuance. 



25. (Original) The method of claim 24, further comprising: 

determining whether a second program unit implementation that references said first 
program unit is consistent with said first version of said first program unit API 
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definition file; and 

indicating said second program unit implementation is verified with said second version of 
said first program unit API definition file when said second version of said first 
program unit implementation is compatible with said first version of said first program 
unit implementation. 

26. (Original) The method of claim 25, further comprising: 

indicating said second program unit implementation is verified with said second version of 
said first program unit implementation when said second program unit implementation 
is verified with said second version of said first program unit API definition file. 

27. (Original) The method of claim 24 wherein said first version of said first program unit API 
definition file is binary compatible with said second version of said first program unit API 
definition file when said second version of said first program unit API definition file 
includes a superset of each element in said first version of said first program unit API 
definition file. 

28. (Original) The method of claim 24 wherein 

said untrusted post-issuance installer verifies a new program unit; and 
said untrusted post-issuance installer installs said verified new program unit on said 
resource-constrained device. 
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29. (Original) The method of claim 24 wherein post-issuance verification is performed on a 
resource-rich device. 

30. (Original) The method of claim 24 wherein post-issuance verification is performed on a 
terminal device. 

3 1 . (Original) The method of claim 24 wherein said verification is performed by the provider of 
said new program unit. 

32. (Original) The method of claim 24 wherein said verification is performed by said applet 
provider. 

33. (Original) The method of claim 24 wherein said verification is performed by said device 
manufacturer. 

34. (Original) The method of claim 24 wherein said verification is performed by said device 
issuer. 

35. (Original) The method of claim 24 wherein said verification is performed by said applet 
provider and said device manufacturer. 

36. (Original) The method of claim 24 wherein said verification is performed by said applet 
provider and said device issuer. 
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37. (Original) The method of claim 24 wherein said verification is performed by said device 
manufacturer and said device issuer. 

38. (Original) The method of claim 24 wherein said verification is performed by said applet 
provider, said device manufacturer and said device issuer. 

39. (Original) The method of claim 24 wherein said verification is performed by said applet 
provider, said device manufacturer, said device issuer and said untrusted post-issuance 
installer. 

40. (Original) The method of claim 24 wherein said verification is performed by said device 
manufacturer, said device issuer and said untrusted post-issuance installer. 

41. (Original) The method of claim 24 wherein said verification is performed by said device 
manufacturer and said untrusted post-issuance installer. 

42. (Original) The method of claim 24 wherein said verification is performed by said device 
issuer and said untrusted post-issuance installer. 

43. (Original) The method of claim 24 wherein post-issuance verification is performed on a 
resource-rich device. 
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44. (Original) The method of claim 24 wherein post-issuance verification is performed on a 
terminal device. 

45. (Original) A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform program verification, comprising: 
receiving content verified by at least one content provider, said at least one content provider 

including an applet provider, a device manufacturer, a device issuer and a trusted post- 
issuance installer, said content including at least one program unit, each program unit 
comprising an Application Programming Interface (API) definition file and an 
implementation, each API definition file defining items in its associated program unit 
that are made accessible to one or more other program units, each implementation 
including executable code corresponding to said API definition file, said executable 
code including type specific instructions and data, said verification including 
determining binary compatibility of earlier program unit implementations with later 
program unit implementations; 

installing said content on a resource-constrained device; 

issuing said resource-constrained device to an end user; and 

allowing post-issuance installation of verified content on said resource-constrained device 
by said trusted post-issuance installer, said post-installation occurring after said 
issuance. 

46. (Previously Presented) A program storage device readable by a machine, embodying a 
program of instructions executable by the machine to perform program verification, 
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comprising: 

receiving content verified by at least one content provider, said at least one content provider 
including an applet provider, a device manufacturer, a device issuer and a trusted post- 
issuance installer, said content including at least one program unit, each program unit 
comprising an Application Programming Interface (API) definition file and an 
implementation, each API definition file defining items in its associated program unit 
that are made accessible to one or more other program units, each implementation 
including executable code corresponding to said API definition file, said executable 
code including type specific instructions and data, said verification including 
determining binary compatibility of earlier program unit implementations with later 
program unit implementations, said verification further comprising: 
receiving a second version of said first program unit implementation and a second 

version of said first program unit API definition file, said second version being a 

revised version of said first version; 
verifying said second version of said first program unit implementation, including 
indicating a verification error when said second version of said first program unit 

implementation is not internally consistent; and 
indicating a verification error when said second version of said first program unit 

implementation is inconsistent with said second version of said first program unit 

API definition file; and 
verifying said second version of said first program unit implementation is binary 

compatible with said first version of said first program unit implementation 

including indicating a verification error when said first version of said first program 
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unit API definition file is incompatible with said second version of said first 

program unit API definition file; 
installing said content on a resource-constrained device; 
issuing said resource-constrained device to an end user; and 

allowing post-issuance installation of verified content on said resource-constrained device 
by said trusted post-issuance installer, said post-installation occurring after said 
issuance. 

47. (Original) The program storage device of claim 46, further comprising: 

indicating a verification error when a second program unit implementation that references 
said first program unit is inconsistent with said first version of said first program unit 
API definition file; and 

indicating said second program unit implementation is verified with said second version of 
said first program unit API definition file when said second version of said first 
program unit implementation is compatible with said first version of said first program 
unit implementation. 

48. (Original) The program storage device of claim 47, further comprising: 

indicating said second program unit implementation is verified with said second version of 
said first program unit implementation when said second program unit implementation 
is verified with said second version of said first program unit API definition file. 

49. (Original) The program storage device of claim 46 wherein said first version of said first 
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program unit API definition file is binary compatible with said second version of said first 
program unit API definition file when said second version of said first program unit API 
definition file includes a superset of each element in said first version of said first program 
unit API definition file. 

50. (Original) The program storage device of claim 46 wherein 

said trusted post-issuance installer verifies a new program unit; and 
said trusted post-issuance installer installs said verified new program unit on said resource- 
constrained device. 

51. (Original) The program storage device of claim 50 wherein post-issuance verification is 
performed on a resource-rich device. 

52. (Original) The program storage device of claim 50 wherein post-issuance verification is 
performed on a terminal device. 

53. (Original) The program storage device of claim 50 wherein said verification is performed 
by the provider of said new program unit. 

54. (Original) A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform program verification, comprising: 
receiving content verified by at least one content provider, said at least one content provider 

including an applet provider, a device manufacturer, a device issuer and an untrusted 
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post-issuance installer, said content including at least one program unit, each program 
unit comprising an Application Programming Interface (API) definition file and an 
implementation, each API definition file defining items in its associated program unit 
that are made accessible to one or more other program units, each implementation 
including executable code corresponding to said API definition file, said executable 
code including type specific instructions and data, said verification including 
determining binary compatibility of earlier program unit implementations with later 
program unit implementations; 

installing said content on a resource-constrained device; 

issuing said resource-constrained device to an end user; and 

allowing post-issuance installation of verified content on said resource-constrained device 
by said untrusted post-issuance installer, said post-installation occurring after said 
issuance. 

55. (Previously Presented) A program storage device readable by a machine, embodying a 
program of instructions executable by the machine to perform program verification, 
comprising: 

receiving content verified by at least one content provider, said at least one content provider 
including an applet provider, a device manufacturer, a device issuer and an untrusted 
post-issuance installer, said content including at least one program unit, each program 
unit comprising an Application Programming Interface (API) definition file and an 
implementation, each API definition file defining items in its associated program unit 
that are made accessible to one or more other program units, each implementation 
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including executable code corresponding to said API definition file, said executable 
code including type specific instructions and data, said verification including 
determining binary compatibility of earlier program unit implementations with later 
program unit implementations, said verification further comprising: 
receiving a second version of said first program unit implementation and a second 

version of said first program unit API definition file, said second version being a 

revised version of said first version; and 
verifying said second version of said first program unit implementation, including 
indicating a verification error when said second version of said first program unit 

implementation is not internally consistent; and 
indicating a verification error when said second version of said first program unit 

implementation is inconsistent with said second version of said first program unit 

API definition file; and 
verifying said second version of said first program unit implementation is binary 

compatible with said first version of said first program unit implementation 

including indicating a verification error when said first version of said first program 

unit API definition file is incompatible when said second version of said first 

program unit API definition file; 
installing said content on a resource-constrained device; 
issuing said resource-constrained device to an end user; and 

allowing post-issuance installation of verified content on said resource-constrained device 
by said untrusted post-issuance installer, said post-installation occurring after said 
issuance. 
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56. (Original) The program storage device of claim 55, further comprising: 

indicating a verification error when a second program unit implementation that references 
said first program unit is inconsistent with said first version of said first program unit 
API definition file; and 

indicating said second program unit implementation is verified with said second version of 
said first program unit API definition file when said second version of said first 
program unit implementation is compatible with said first version of said first program 
unit implementation. 

57. (Original) The program storage device of claim 56, further comprising: 

indicating said second program unit implementation is verified with said second version of 
said first program unit implementation when said second program unit implementation 
is verified with said second version of said first program unit API definition file. 

58. (Original) The program storage device of claim 55 wherein said first version of said first 
program unit API definition file is binary compatible with said second version of said first 
program unit API definition file when said second version of said first program unit API 
definition file includes a superset of each element in said first version of said first program 
unit API definition file. 

59. (Original) The program storage device of claim 55 wherein 

said untrusted post-issuance installer verifies a new program unit; and 
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said untrusted post-issuance installer installs said verified new program unit on said 
resource-constrained device. 

60. (Original) The program storage device of claim 55 wherein post-issuance verification is 
performed on a resource-rich device. 

61. (Original) The program storage device of claim 55 wherein post-issuance verification is 
performed on a terminal device. 

62. (Original) The program storage device of claim 55 wherein said verification is performed 
by the provider of said new program unit. 

63. (Original) A system for executing a software application, the system comprising: 

a computing system that generates executable code, comprising means for receiving content 
verified by at least one content provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer and a trusted post-issuance 
installer, said content including at least one program unit, each program unit comprising 
an Application Programming Interface (API) definition file and an implementation, 
each API definition file defining items in its associated program unit that are made 
accessible to one or more other program units, each implementation including 
executable code corresponding to said API definition file, said executable code 
including type specific instructions and data, said verification including determining 
binary compatibility of earlier program unit implementations with later program unit 



21 of 40 



SV #168346 vl 



Docket No.: SUN-P4182 
(811173-000118) 

implementations; 
means for installing said content on a resource-constrained device; 
means for issuing said resource-constrained device to an end user; and 
means for allowing post-issuance installation of verified content on said resource- 
constrained device by said trusted post-issuance installer, said post-installation 
occurring after said issuance. 

(Previoulsy Amended) A system for executing a software application, the system 
comprising: 

a computing system that generates executable code, comprising means for receiving content 
verified by at least one content provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer and a trusted post-issuance 
installer, said content including at least one program unit, each program unit comprising 
an Application Programming Interface (API) definition file and an implementation, 
each API definition file defining items in its associated program unit that are made 
accessible to one or more other program units, each implementation including 
executable code corresponding to said API definition file, said executable code 
including type specific instructions and data, said verification including determining 
binary compatibility of earlier program unit implementations with later program unit 
implementations, said computing system further comprising: 

means for receiving a second version of said first program unit implementation and a 
second version of said first program unit API definition file, said second version 
being a revised version of said first version; 
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means for verifying said second version of said first program unit implementation, 
including 

means for indicating a verification error when said second version of said first program 

unit implementation is not internally consistent; and 
means for indicating a verification error when said second version of said first program 
unit implementation is inconsistent with said second version of said first program 
unit API definition file; and 
means for verifying said second version of said first program unit implementation is 
binary compatible with said first version of said first program unit implementation 
including indicating a verification error when said first version of said first program 
unit API definition file is incompatible with said second version of said first 
program unit API definition file; 
means for installing said content on a resource-constrained device; 
means for issuing said resource-constrained device to an end user; and 
means for allowing post-issuance installation of verified content on said resource- 
constrained device by said trusted post-issuance installer, said post-installation 
occurring after said issuance. 



65. (Original) The system of claim 64, further comprising: 

means for indicating a verification error when a second program unit implementation that 

references said first program unit is inconsistent with said first version of said first 

program unit API definition file; and 
means for indicating said second program unit implementation is verified with said second 
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version of said first program unit API definition file when said second version of said 
first program unit implementation is compatible with said first version of said first 
program unit implementation. 

66. (Original) The system of claim 65, further comprising: 

means for indicating said second program unit implementation is verified with said second 
version of said first program unit implementation when said second program unit 
implementation is verified with said second version of said first program unit API 
definition file. 

67. (Original) The system of claim 64 wherein said first version of said first program unit API 
definition file is binary compatible with said second version of said first program unit API 
definition file when said second version of said first program unit API definition file 
includes a superset of each element in said first version of said first program unit API 
definition file. 

68. (Original) The system of claim 64 wherein 

said trusted post-issuance installer verifies a new program unit; and 
said trusted post-issuance installer installs said verified new program unit on said resource- 
constrained device. 

69. (Original) The system of claim 68 wherein post-issuance verification is performed on a 
resource-rich device. 
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70. (Original) The system of claim 68 wherein post-issuance verification is performed on a 
terminal device. 

71 . (Original) The system of claim 68 wherein said verification is performed by the provider of 
said new program unit. 

72. (Original) The system of claim 68 wherein said verification is performed by said applet 
provider. 

73. (Original) A system for executing a software application, the system comprising: 

a computing system that generates executable code, comprising means for receiving content 
verified by at least one content provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer and an untrusted post-issuance 
installer, said content including at least one program unit, each program unit comprising 
an Application Programming Interface (API) definition file and an implementation, 
each API definition file defining items in its associated program unit that are made 
accessible to one or more other program units, each implementation including 
executable code corresponding to said API definition file, said executable code 
including type specific instructions and data, said verification including determining 
binary compatibility of earlier program unit implementations with later program unit 
implementations; 

means for installing said content on a resource-constrained device; 
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means for issuing said resource-constrained device to an end user; and 
means for allowing post-issuance installation of verified content on said resource- 
constrained device by said untrusted post-issuance installer, said post-installation 
occurring after said issuance. 

74. (Previously Presented) A system for executing a software application, the system 
comprising: 

a computing system that generates executable code, comprising means for receiving content 
verified by at least one content provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer and an untrusted post-issuance 
installer, said content including at least one program unit, each program unit comprising 
an Application Programming Interface (API) definition file and an implementation, 
each API definition file defining items in its associated program unit that are made 
accessible to one or more other program units, each implementation including 
executable code corresponding to said API definition file, said executable code 
including type specific instructions and data, said verification including determining 
binary compatibility of earlier program unit implementations with later program unit 
implementations, said computing system further comprising: 

means for receiving a second version of said first program unit implementation and a 
second version of said first program unit API definition file, said second version 
being a revised version of said first version; 

means for verifying said second version of said first program unit implementation, 
including 
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means for indicating a verification error when said second version of said first program 

unit implementation is not internally consistent; and 
means for indicating a verification error when said second version of said first program 
unit implementation is inconsistent with said second version of said first program 
unit API definition file; and 
means for verifying said second version of said first program unit implementation is 
binary compatible with said first version of said first program unit implementation 
including indicating a verification error when said first version of said first program 
unit API definition file is incompatible with said second version of said first 
program unit API definition file; 
means for installing said content on a resource-constrained device; 
means for issuing said resource-constrained device to an end user; and 
means for allowing post-issuance installation of verified content on said resource- 
constrained device by said untrusted post-issuance installer, said post-installation 
occurring after said issuance. 

(Original) The system of claim 74, further comprising: 

means for indicating a verification error when a second program unit implementation that 
references said first program unit is inconsistent with said first version of said first 
program unit API definition file; and 

means for indicating said second program unit implementation is verified with said second 
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version of said first program unit API definition file when said second version of said 
first program unit implementation is compatible with said first version of said first 
program unit implementation. 

76. (Original) The system of claim 75, further comprising: 

means for indicating said second program unit implementation is verified with said second 
version of said first program unit implementation when said second program unit 
implementation is verified with said second version of said first program unit API 
definition file. 

77. (Original) The system of claim 74 wherein said first version of said first program unit API 
definition file is binary compatible with said second version of said first program unit API 
definition file when said second version of said first program unit API definition file 
includes a superset of each element in said first version of said first program unit API 
definition file. 

78. (Original) The system of claim 74 wherein 

said untrusted post-issuance installer verifies a new program unit; and 
said untrusted post-issuance installer installs said verified new program unit on said 
resource-constrained device. 

79. (Original) The system of claim 74 wherein post-issuance verification is performed on a 
resource-rich device. 
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80. (Original) The system of claim 74 wherein post-issuance verification is performed on a 
terminal device. 

81. (Original) The system of claim 78 wherein said verification is performed by the provider of 
said new program unit. 

82. (Original) A resource-constrained device, comprising: 

memory for providing content verified by at least one content provider, said at least one 
content provider including an applet provider, a device manufacturer, a device issuer 
and a trusted post-issuance installer, said content including at least one program unit, 
each program unit comprising an Application Programming Interface (API) definition 
file and an implementation, each API definition file defining items in its associated 
program unit that are made accessible to one or more other program units, each 
implementation including executable code corresponding to said API definition file, 
said executable code including type specific instructions and data, said verification 
including determining binary compatibility of earlier program unit implementations 
with later program unit implementations; 

an installer device for installation of said content on said resource-constrained device, said 
installation including installation of initial content and installation of additional content 
by said trusted post-issuance installer after said resource-constrained device is issued to 
an end user; and 

a virtual machine that is capable of executing instructions included within said content. 
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83. (Original) The resource-constrained device of claim 82 wherein said resource-constrained 
device comprises a smart card. 

84. (Cancelled) 

85. (Original) A resource-constrained device, comprising: 

memory for providing content verified by at least one content provider, said at least one 
content provider including an applet provider, a device manufacturer, a device issuer 
and an untrusted post-issuance installer, said content including at least one program 
unit, each program unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition file defining items in its 
associated program unit that are made accessible to one or more other program units, 
each implementation including executable code corresponding to said API definition 
file, said executable code including type specific instructions and data, said verification 
including determining binary compatibility of earlier program unit implementations 
with later program unit implementations; 

an installer device for installation of said content on said resource-constrained device, said 
installation including installation of initial content and installation of additional content 
by said untrusted post-issuance installer after said resource-constrained device is issued 
to an end user; and 

a virtual machine that is capable of executing instructions included within said content. 
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86. (Original) The resource-constrained device of claim 85 wherein said resource-constrained 
device comprises a smart card. 



87. (Cancelled) 
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